$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a22dc7a9-709a-3fb7-977d-278029d3857a.roa File: a22dc7a9-709a-3fb7-977d-278029d3857a.roa (raw, json) Hash identifier: 145htV3nOHLhMcjday/QhuNFVU+zvrZHNFiR3V7LYFY= Subject key identifier: D7:E8:56:71:AF:31:BD:49:94:79:0C:A2:20:2E:20:4A:AF:02:DF:4B Certificate issuer: /CN=a327249c-db27-40a5-b04c-da03ae2d60a8 Certificate serial: 010D0C9F4328584F7E7D9B1241D34290CEE5BF00 Authority key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a22dc7a9-709a-3fb7-977d-278029d3857a.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 7018 IP address blocks: 23.160.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:9b:12:41:d3:42:90:ce:e5:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a327249c-db27-40a5-b04c-da03ae2d60a8 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=711e507f-f536-47a1-a28e-5138c7ee34dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:9c:3e:90:b3:0b:7b:ca:bf:a9:de:3d:0a: f0:df:70:05:49:d2:3c:66:33:c8:73:af:d2:1b:1d: 29:ed:a1:1a:a9:f9:a5:19:0f:54:68:4e:c6:57:08: 17:f4:a5:01:9d:5d:e9:50:d1:01:0d:8e:87:66:6c: 0f:c7:33:53:4f:30:a7:65:6b:e3:eb:5c:1e:76:1b: 1c:b0:79:a1:75:a6:16:aa:c7:c5:c4:a6:50:89:7e: e1:b4:4c:ab:5c:28:16:b2:d0:c8:ab:81:e4:87:3c: 13:e5:5e:90:5f:97:9f:a7:0c:a2:5a:c2:fe:89:36: 89:8a:2b:e4:1e:ff:95:0b:fe:c1:2c:f1:8a:5f:6f: be:0f:b2:6f:a9:56:53:45:32:1d:47:cb:62:de:d3: 3c:19:8a:f8:4c:b8:4c:2b:ae:7e:86:ab:98:ec:a5: 42:75:c1:d1:56:94:44:d3:46:de:55:a0:8c:d2:f6: 1d:cf:1b:f2:af:6b:8a:21:6a:c6:b5:59:ba:b5:26: 5c:7e:ce:6f:3e:8e:c8:36:ab:8c:c8:30:3b:42:b3: 0d:2f:82:b8:7a:7c:ef:11:2e:78:b6:1d:7d:b3:bf: bd:79:bd:d0:73:f1:d0:10:6a:63:b0:ad:9a:65:dc: 46:ce:db:b4:5c:9c:7e:44:c7:43:b7:c4:a5:6e:4d: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:56:71:AF:31:BD:49:94:79:0C:A2:20:2E:20:4A:AF:02:DF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a22dc7a9-709a-3fb7-977d-278029d3857a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl X509v3 Authority Key Identifier: keyid:EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer sbgp-ipAddrBlock: critical IPv4: 23.160.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:21:8f:fe:0f:90:f5:c7:a6:b9:df:d8:10:44:f3:7e:da:f5: eb:37:dc:cb:55:70:60:c7:1b:79:ac:5c:58:ac:cb:d5:f5:13: 6d:77:c6:7c:86:45:9d:d2:c3:62:98:97:58:7d:60:d9:70:57: 51:7b:b6:d9:8e:75:b6:5f:51:d0:6e:69:ba:05:ad:04:41:4c: 62:e2:1d:57:2e:6f:0a:99:11:29:ca:42:39:a5:53:b4:e4:ad: 1e:ac:89:9c:36:ad:aa:31:f6:7a:a9:82:73:04:9b:44:f5:d6: db:43:c4:59:b0:99:fc:57:f2:ac:eb:fe:5e:62:af:61:01:f7: c2:70:60:53:c4:ae:b6:a4:04:70:e8:c7:76:23:22:a1:a6:9e: 5d:9e:b8:c6:a1:26:54:12:ed:e4:a7:3f:cd:bd:a3:c3:2d:3c: a4:f8:0a:30:59:d6:59:91:24:56:36:c8:9f:80:c7:af:35:1f: 32:58:e4:ad:86:96:a8:c5:7d:ee:dc:6b:c2:7b:0f:30:3d:38: bc:12:57:df:89:ff:e0:d8:d7:d2:37:7c:41:4d:47:b3:f7:cc: 21:30:cd:b9:22:cc:1c:bb:12:28:58:42:70:75:c2:ac:6b:f2: b2:2b:a9:f7:93:1d:38:bc:0e:37:f0:29:3b:c2:38:89:91:64: 85:f3:8b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fZsSQdNCkM7lvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyNzI0OWMtZGIyNy00MGE1LWIwNGMtZGEwM2FlMmQ2 MGE4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NzExZTUwN2YtZjUzNi00N2ExLWEyOGUtNTEzOGM3ZWUzNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiKcPpCzC3vKv6nePQrw33AFSdI8ZjPIc6/S Gx0p7aEaqfmlGQ9UaE7GVwgX9KUBnV3pUNEBDY6HZmwPxzNTTzCnZWvj61wedhsc sHmhdaYWqsfFxKZQiX7htEyrXCgWstDIq4HkhzwT5V6QX5efpwyiWsL+iTaJiivk Hv+VC/7BLPGKX2++D7JvqVZTRTIdR8ti3tM8GYr4TLhMK65+hquY7KVCdcHRVpRE 00beVaCM0vYdzxvyr2uKIWrGtVm6tSZcfs5vPo7INquMyDA7QrMNL4K4enzvES54 th19s7+9eb3Qc/HQEGpjsK2aZdxGztu0XJx+RMdDt8Slbk0/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfoVnGvMb1JlHkMoiAuIEqvAt9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMzI3 MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAzYWUyZDYwYTgvYTIyZGM3YTktNzA5YS0z ZmI3LTk3N2QtMjc4MDI5ZDM4NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTMyNzI0OWMtZGIyNy00MGE1LWIw NGMtZGEwM2FlMmQ2MGE4L2EzMjcyNDljLWRiMjctNDBhNS1iMDRjLWRhMDNhZTJk NjBhOC5jcmwwHwYDVR0jBBgwFoAU6yYZlo4EMLUJJ9kFyamzCKIGx2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hMzI3MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAz YWUyZDYwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6A8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIhj/4PkPXHprnf2BBE837a9es33MtVcGDHG3msXFisy9X1E213xnyG RZ3Sw2KYl1h9YNlwV1F7ttmOdbZfUdBuaboFrQRBTGLiHVcubwqZESnKQjmlU7Tk rR6siZw2raox9nqpgnMEm0T11ttDxFmwmfxX8qzr/l5ir2EB98JwYFPErrakBHDo x3YjIqGmnl2euMahJlQS7eSnP829o8MtPKT4CjBZ1lmRJFY2yJ+Ax681HzJY5K2G lqjFfe7ca8J7DzA9OLwSV9+J/+DY19I3fEFNR7P3zCEwzbkizBy7EihYQnB1wqxr 8rIrqfeTHTi8DjfwKTvCOImRZIXzi2A= -----END CERTIFICATE-----Generated at Sun Oct 18 09:26:23 2026 by rpki-client